Medium 5.3
2025-04-25< 1.10.36
WS Form LITE – Drag & Drop Contact Form Builder for WordPress <= 1.10.35 - Missing Authorization to Unauthenticated Sensitive Information Exposure
Minimum safe version
1.10.36
Update to 1.10.36 or later to address 10 fixable vulnerabilities
WS Form LITE – Drag & Drop Contact Form Builder for WordPress <= 1.10.35 - Missing Authorization to Unauthenticated Sensitive Information Exposure
CVE-2024-13509
CVE-2024-10647
CVE-2024-47320
CVE-2023-5424
WordPress WS Form LITE Plugin <= 1.9.170 is vulnerable to SQL Injection
WS Form LITE <= 1.9.117 - CAPTCHA Bypass
WordPress WS Form LITE Plugin <= 1.9.117 is vulnerable to Bypass Vulnerability
CVE-2022-23988
CVE-2022-23987